Privacy Policy

1. Information We Process

• Account information: your email address, name, and Apple, Google, or Supabase account identifiers.
• Creative content: prompts, uploaded images, audio recordings, generated code, projects, and project settings.
• Published-site data: website content and direct email, phone, Telegram, or WhatsApp links that you choose to publish. Cormak does not receive or store messages sent through those links.
• Purchase information: subscription or consumable status and transaction identifiers supplied by a store or payment provider. We do not store complete payment-card details.

2. How We Use Information

• Authenticate your account and provide AI generation, project storage, preview, export, and publishing.
• Process subscriptions and purchases, prevent abuse, and provide support.
• Maintain the security and reliability of the Service and comply with applicable legal obligations.

3. AI Processing and Your Permission

Prompts, images, and audio can contain personal or confidential information. Before your first AI request, Cormak AI asks for permission to send the material you submit to third-party AI providers for the purpose of generating or transcribing your requested result.

Audio uploads may be used for voice conversion or dubbing with provider-library voices. Cormak does not offer voice cloning or create reusable voice profiles from your recording.

You may decline that permission. If you decline, the material is not sent and the AI feature cannot complete that request. Do not submit content that you do not have the right or consent to share.

4. Service Providers and Connectors

We do not sell personal data. To operate the Service, information may be processed by the following providers:

• Supabase for accounts, authentication, databases, and project storage.
• Cloudflare for hosting and delivery of published websites.
• Google Gemini and OpenRouter, including model providers available through OpenRouter, for AI generation and transcription.
• Dodo Payments as merchant of record for subscriptions and credit packs offered through app.cormak.app.
• Resend for service email.
• Email, telephone, Telegram, or WhatsApp providers when a visitor follows a direct contact link. The selected service's own terms and privacy policy then apply.

5. Publishing and Public Data

When you publish a site, the site and the materials on it become available on the internet through a public link. Links to generated media may be accessible to anyone who has the link. Do not publish secrets or personal data without a lawful basis.

Published sites may show direct contact links only when you supply the destination. Messages are handled by the visitor's email, telephone, Telegram, or WhatsApp service and are not submitted to Cormak.

6. Security and Retention

We use access controls and encrypted network transport intended to protect information. No internet service can guarantee absolute security.

We retain information while it is needed to provide the Service. Some records may be retained longer when required by law or reasonably necessary for security, fraud prevention, dispute resolution, or financial recordkeeping.

7. Account Deletion and Your Rights

You can start account deletion in the app at Settings → Account → Delete Account. We delete or de-identify associated data within a reasonable technical period, subject to the limited retention purposes described above.

Deleting your Cormak AI account does not itself cancel an active subscription. Cancel subscriptions from the web account through the secure customer portal.

To request access, correction, or a copy of your data, contact support@cormak.app.

8. Children's Privacy

The Service is not intended for anyone under 16, and we do not knowingly collect personal data from children.

9. Changes

We may update this Policy. If a change materially affects how we process information, we will provide an appropriate notice.

10. Contact Us

For privacy questions, data requests, or account-deletion assistance, contact support@cormak.app.